Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft
File:                     dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft (raw, json)
Hash identifier:          nsLyTcs5DFVPt4Pgjq4xwTvhzotOn9gtMwYor+iS8Yw=
Subject key identifier:   C1:49:4E:2F:9C:1D:E4:96:1A:9F:56:02:B8:70:CA:65:F2:88:B5:C2
Authority key identifier: 75:51:B0:2D:55:D3:50:5F:B9:F9:71:9F:BD:0B:52:31:6F:F6:C1:03
Certificate issuer:       /CN=7551b02d55d3505fb9f9719fbd0b52316ff6c103
Certificate serial:       01A132FDFC1869BC3C0AA6FD7243BA11F381
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dVGwLVXTUF-5-XGfvQtSMW_2wQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft
Manifest number:          1AA0
Signing time:             Tue 13 Oct 2026 02:01:08 +0000
Manifest this update:     Tue 13 Oct 2026 02:01:08 +0000
Manifest next update:     Wed 14 Oct 2026 02:01:08 +0000
Files and hashes:         1: dVGwLVXTUF-5-XGfvQtSMW_2wQM.crl (hash: hX0obxl+iFTxQa7UG14DDGrrVA6pDxeGwql/5Oc/dJs=)
                          2: hPEOUrTaqxkP0HraBv5tFWum52o.roa (hash: a68ZRNdry4Fa8CMUTj7dyBiReCufFH2K20dWi6+LdmE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dVGwLVXTUF-5-XGfvQtSMW_2wQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 02:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:32:fd:fc:18:69:bc:3c:0a:a6:fd:72:43:ba:11:f3:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7551b02d55d3505fb9f9719fbd0b52316ff6c103
        Validity
            Not Before: Oct 13 02:01:08 2026 GMT
            Not After : Oct 14 02:01:08 2026 GMT
        Subject: CN=c1494e2f9c1de4961a9f5602b870ca65f288b5c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8e:e3:10:21:0b:0b:72:e9:ac:66:d1:bb:b8:
                    5b:d5:e7:0f:c9:c7:d1:96:d8:dc:99:47:b2:d9:c8:
                    51:6c:50:01:83:e6:cb:87:c7:4e:93:10:06:8a:54:
                    7b:3b:3c:81:4c:82:3b:48:f5:4d:a7:be:69:b5:f9:
                    58:18:f0:c3:50:24:eb:11:66:7d:64:6b:32:f1:c2:
                    ab:8a:22:4a:ac:f1:13:80:76:45:c0:a7:3b:f3:14:
                    cb:54:42:a0:30:0b:2f:e2:df:ce:00:31:29:36:f7:
                    37:01:82:35:87:97:96:43:c7:d7:77:a8:c2:9d:eb:
                    a0:97:18:5a:71:2a:05:8d:ae:86:c2:c6:2e:65:3a:
                    ed:f1:16:90:1d:1a:ff:ea:49:ae:9a:10:03:11:78:
                    45:42:09:d9:e1:fd:e9:bd:a1:81:af:bd:46:9f:96:
                    d7:a6:01:51:1f:92:b4:5f:46:26:a9:8e:ef:38:1a:
                    d9:6d:8e:aa:b5:24:67:eb:78:76:fa:2f:29:a1:11:
                    64:26:ed:8a:41:cb:f8:43:ab:f6:b8:a5:4a:9c:7c:
                    e1:8d:69:ec:08:09:6e:1f:50:46:16:44:dc:17:0d:
                    e4:34:c1:17:b8:77:fc:b8:3a:3c:5e:ba:65:71:a8:
                    9f:de:5f:9c:56:4f:e7:60:ea:a0:53:49:6a:e8:c8:
                    6c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:49:4E:2F:9C:1D:E4:96:1A:9F:56:02:B8:70:CA:65:F2:88:B5:C2
            X509v3 Authority Key Identifier:
                keyid:75:51:B0:2D:55:D3:50:5F:B9:F9:71:9F:BD:0B:52:31:6F:F6:C1:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVGwLVXTUF-5-XGfvQtSMW_2wQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:6e:9d:84:a5:36:1c:04:b4:e6:22:b6:7c:50:22:72:f4:c2:
         ad:5f:c4:d1:d6:c4:d1:2a:7d:40:87:49:22:77:64:3f:ea:e6:
         f1:b8:f5:43:90:bc:41:f5:d2:a0:6a:1a:e4:42:32:24:d8:65:
         7d:96:c9:ab:4e:83:5c:36:ce:0d:c9:28:40:28:7a:31:0c:29:
         9c:4f:c4:8a:e1:ef:70:91:29:e7:5a:fe:52:12:63:d6:59:99:
         60:0c:c6:01:87:10:9d:fb:aa:63:87:7a:0d:c3:d8:2e:61:d1:
         1e:28:ed:ac:a6:71:8f:a5:f1:cd:5f:89:2f:0a:e6:7e:f7:fc:
         ec:dc:d2:6f:0a:f6:63:80:8a:77:4b:22:45:e7:8c:c3:f1:29:
         9c:aa:3b:76:be:71:54:50:b3:c7:d9:6c:8a:3f:1d:9e:82:79:
         ce:57:fe:cf:7b:5a:67:d6:98:06:d9:8d:fc:9e:b5:57:0c:4e:
         7d:ba:ac:d6:87:15:f3:ff:43:f6:77:ed:bb:7b:42:97:df:54:
         7f:3b:46:c9:19:c4:6d:80:b5:d7:3e:e9:ca:97:93:ab:99:0f:
         06:38:64:61:63:a0:3e:fc:49:ef:3d:5c:a4:f1:26:89:a9:f7:
         b1:7d:12:45:11:93:fb:90:e8:49:60:76:08:b6:52:31:43:ff:
         7d:e3:96:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 10:29:48 2026 by rpki-client